Red Hat Enterprise Virtualization Manager's SPICE Plugin for Internet Explorer contains a flaw that may allow an attacker to gain access to unauthorized privileges. The issue is triggered when a local attacker creates a certain named pipe, allowing them to gain user privileges via vectors related to knowledge of this pipe's name through use of the ImpersonateNamedPipeClient function.
Classification
Location:
Local Access Required
Attack Type:
Race Condition
Impact:
Loss of Integrity
Solution:
Upgrade
Exploit:
Exploit Unknown
Disclosure:
Vendor Verified
Solution
Upgrade to version 2.2.4 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.
